indayi.de Cross Site Scripting vulnerability OBB-4047449

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

imagepainting.com Cross Site Scripting vulnerability OBB-4047427

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OSV-2025-291 Use-of-uninitialized-value in Poco::Net::NTLMCredentials::parseChallengeMessage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411466303 Crash type: Use-of-uninitialized-value Crash state: Poco::Net::NTLMCredentials::parseChallengeMessage Poco::Net::HTTPNTLMCredentials::createNTLMMessage Poco::Net::HTTPNTLMCredentials::authenticate...

PT-2025-17409 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Men Salon Management System. This issue affects unknown code of the file /admin/forgot-password.php. The manipulation of...

CVE-2022-31793

creationtimestamp| type| source ---|---|--- 2025-04-20 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-04-20 2026-06-23 14:06:15+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/05c68957-3684-432f-b134-714c8bc8030f 2026-06-30...

PT-2025-19366 · Git +1 · Poco

Name of the Vulnerable Software and Affected Versions: Poco versions affected versions not specified Description: The software suffers from a use-of-uninitialized-value issue. This occurs within the Poco::Net::NTLMCredentials::parseChallengeMessage,...

CVE-2025-3798

creationtimestamp| type| source ---|---|--- 2025-04-19 11:02:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12581 2025-04-19 12:39:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln65qeca422v 2025-04-19 13:28:48+00:00| seen|...

hypernietzsche.org Cross Site Scripting vulnerability OBB-4047371

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-3797

creationtimestamp| type| source ---|---|--- 2025-04-19 08:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln5qctewf42u 2025-04-19 09:02:33+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln5rld33x3r2 2025-04-19...

OSV-2025-290 Heap-buffer-overflow in pcpp::TelnetLayer::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460531 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::TelnetLayer::toString pcpp::Packet::toStringList pcpp::Packet::toString...

OSV-2025-289 Stack-buffer-overflow in ot::Cli::Utils::OutputLine

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460530 Crash type: Stack-buffer-overflow READ Crash state: ot::Cli::Utils::OutputLine ot::Cli::Dns::HandleDnsRecordResponse ot::Dns::Client::FinalizeQuery...

PT-2025-19365 · Git +1 · Openthread

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a stack-buffer-overflow read vulnerability. The crash state indicates the issue occurs within the Cli::Utils::OutputLine,...

SUSE CVE-2025-22061

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix qid report in airohatcgethtbgetleafqueue Fix the following kernel warning deleting HTB offloaded leafs and/or root HTB qdisc in airohaeth driver properly reporting qid in airohatcgethtbgetleafqueue routine. $tc...

CVE-2025-32377

creationtimestamp| type| source ---|---|--- 2025-04-18 20:33:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrgyixf2d 2025-04-18 20:35:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114360879207101550 2025-04-18 20:59:25+00:00| published-proof-of-concept|...

CVE-2025-25985

creationtimestamp| type| source ---|---|--- 2025-04-18 20:33:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrgkrn42g 2025-04-18 20:59:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12546 2025-04-18 23:16:07+00:00| seen|...

CVE-2025-25983

creationtimestamp| type| source ---|---|--- 2025-04-18 20:33:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrg4wbm2g 2025-04-18 20:59:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12540 2025-04-18 23:16:06+00:00| seen|...

CVE-2025-28237

creationtimestamp| type| source ---|---|--- 2025-04-18 17:59:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12512 2025-04-18 19:34:39+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk6qfyek2 2025-04-18...

GHSA-8JV7-77JW-H646

creationtimestamp| type| source ---|---|--- 2025-04-18 16:59:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12504...

GHSA-MG2H-6X62-WPWC Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass

Impact In applications that specify different validation strategies for different content types, it's possible to bypass the validation by providing a slightly altered content type such as with different casing or altered whitespacing before ;. Users using the the following pattern are affected: ...

indiaflora-ces.iisc.ac.in Cross Site Scripting vulnerability OBB-4046981

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...